8,464 results · Feed
-
High max 7.8USN-5846-1 1 CVE
xorg-server, xorg-server-hwe-18.04, xwayland vulnerability
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could possibly use these issues to cause the X Server to crash, execute arbitrary code, or escalate privileges.
first Feb 7, 2023 -
UnscoredUSN-5880-2 0 CVEs
firefox regressions
USN-5880-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Christian Holler discovered that Firefox did not properly manage memory…
first Mar 1, 2023 -
High max 7.5USN-5827-1 3 CVEs
bind9 vulnerabilities
Rob Schulhof discovered that Bind incorrectly handled a large number of UPDATE messages. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. (CVE-2022-3094) Borja Marcos discovered that Bind in…
first Jan 25, 2023 -
UnscoredUSN-5816-2 0 CVEs
firefox regressions
USN-5816-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Niklas Baumstark discovered that a compromised web child process of Fir…
first Feb 6, 2023 -
Critical max 9.8USN-5880-1 15 CVEs
firefox vulnerabilities
Christian Holler discovered that Firefox did not properly manage memory when using PKCS 12 Safe Bag attributes. An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes. (CVE-2023-0767) Johan Carlsson discov…
first Feb 20, 2023 -
UnscoredUSN-5822-2 0 CVEs
samba regression
USN-5822-1 fixed vulnerabilities in Samba. The update for Ubuntu 20.04 LTS introduced regressions in certain environments. Pending investigation of these regressions, this update temporarily reverts the security fixes. We apologize for the inconvenience. Orig…
first Jan 26, 2023 -
Medium max 6.5USN-5795-1 2 CVEs
net-snmp vulnerabilities
It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause Net-SNMP to crash, resulting in a denial of service.
first Jan 9, 2023 -
High max 8.8USN-5816-1 9 CVEs
firefox vulnerabilities
Niklas Baumstark discovered that a compromised web child process of Firefox could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. An attacker could potentially exploits this to obtain sensiti…
first Jan 23, 2023 -
Critical max 9.8USN-5787-1 1 CVE
libksba vulnerability
It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jan 5, 2023 -
UnscoredUSN-5823-3 0 CVEs
mysql-5.7, mysql-8.0 regression
USN-5823-1 fixed vulnerabilities in MySQL. Unfortunately, 8.0.32 introduced a regression in MySQL Router preventing connections from PyMySQL. This update reverts most of the changes in MySQL Router to 8.0.31 until a proper fix can be found. We apologize for t…
first Jan 29, 2023 -
High max 8.8USN-5778-1 6 CVEs
xorg-server, xorg-server-hwe-18.04, xwayland vulnerabilities
Jan-Niklas Sohn discovered that X.Org X Server extensions contained multiple security issues. An attacker could possibly use these issues to cause the X Server to crash, execute arbitrary code, or escalate privileges.
first Dec 14, 2022 -
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jan 9, 2023 -
UnscoredUSN-5739-2 0 CVEs
mariadb-10.3, mariadb-10.6 regression
USN-5739-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: MariaDB has been updated to 10.3.38 in Ubuntu 20.04 LTS and to 10.6.12 in Ubuntu 22.04 LTS and U…
first Feb 22, 2023 -
Medium max 4.6USN-5741-1 1 CVE
exim4 vulnerability
It was discovered that Exim incorrectly handled certain regular expressions. An attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 24, 2022 -
High max 7.5USN-5788-1 2 CVEs
curl vulnerabilities
Hiroki Kurosawa discovered that curl incorrectly handled HSTS support when certain hostnames included IDN characters. A remote attacker could possibly use this issue to cause curl to use unencrypted connections. This issue only affected Ubuntu 22.04 LTS, and …
first Jan 5, 2023 -
UnscoredUSN-5782-3 0 CVEs
firefox regressions
USN-5782-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Firefox was using an out-of-date libusrsctp libr…
first Jan 10, 2023 -
UnscoredUSN-5782-2 0 CVEs
firefox regressions
USN-5782-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Firefox was using an out-of-date libusrsctp libr…
first Jan 5, 2023 -
High max 8.8USN-5718-1 1 CVE
pixman vulnerability
Maddie Stone discovered that pixman incorrectly handled certain memory operations. A remote attacker could use this issue to cause pixman to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 8, 2022 -
UnscoredUSN-5709-2 0 CVEs
firefox vulnerabilities
USN-5709-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…
first Nov 10, 2022 -
Medium max 6.3USN-5743-2 1 CVE
tiff vulnerability
USN-5743-1 fixed a vulnerability in LibTIFF. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. Original advisory details: It was discovered that LibTIFF incorrectly handled certain malfor…
first Dec 1, 2022 -
High max 8.8USN-5709-1 6 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Nov 1, 2022 -
High max 8.8USN-5730-1 5 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Nov 17, 2022 -
UnscoredUSN-5680-1 2 CVEs
gThumb vulnerabilities
It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of …
first Oct 14, 2022 -
Critical max 9.8USN-5702-1 3 CVEs
curl vulnerabilities
Robby Simpson discovered that curl incorrectly handled certain POST operations after PUT operations. This issue could cause applications using curl to send the wrong data, perform incorrect memory operations, or crash. (CVE-2022-32221) Hiroki Kurosawa discove…
first Oct 26, 2022 -
High max 8.8USN-5642-1 1 CVE
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Sep 26, 2022 -
High max 7.8USN-5711-1 1 CVE
ntfs-3g vulnerability
Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this issue to gain privileges.
first Nov 2, 2022 -
High max 7.1USN-5643-1 2 CVEs
ghostscript vulnerabilities
It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of serv…
first Sep 27, 2022 -
Medium max 6.5USN-5658-1 2 CVEs
isc-dhcp vulnerabilities
It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to crash, resulting in a denial of service. (CVE-2022-2928) It was discovered that DHCP incorrectly handled certai…
first Oct 5, 2022 -
UnscoredUSN-5661-1 3 CVEs
libreoffice vulnerabilities
It was discovered that LibreOffice incorrectly validated macro signatures. If a user were tricked into opening a specially crafted document, a remote attacker could possibly use this issue to execute arbitrary macros. (CVE-2022-26305) It was discovered that L…
first Oct 6, 2022 -
High max 8.8USN-5649-1 7 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass Content Security Policy (CSP) or other security restrictions…
first Sep 30, 2022 -
Critical max 9.8USN-5615-1 3 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled INTERSEC query processing. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-35525) It was discovered that SQLite incorr…
first Sep 15, 2022 -
UnscoredUSN-5607-1 1 CVE
gdk-pixbuf vulnerability
It was discovered that GDK-PixBuf incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
first Sep 13, 2022 -
High max 8.8USN-5581-1 5 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the contents of the addressbar, bypass security restrictions,…
first Aug 24, 2022 -
High max 8.8USN-5575-1 2 CVEs
libxslt vulnerabilities
Nicolas Grégoire discovered that Libxslt incorrectly handled certain XML. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-5815) Alexey Neyman incorrectly…
first Aug 22, 2022 -
Medium max 6.6USN-5614-1 1 CVE
wayland vulnerability
It was discovered that Wayland incorrectly handled reference counting certain objects. An attacker could use this issue to cause Wayland to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Sep 15, 2022 -
Critical max 9.8USN-5570-2 1 CVE
zlib vulnerability
USN-5570-1 fixed a vulnerability in zlib. This update provides the corresponding update for Ubuntu 22.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operat…
first Oct 17, 2022 -
High max 8.8
webkit2gtk vulnerability
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Sep 14, 2022 -
UnscoredUSN-5583-2 1 CVE
systemd regression
USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing networking problems for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that systemd…
first Sep 14, 2022 -
UnscoredUSN-5578-1 1 CVE
open-vm-tools vulnerability
It was discovered that Open VM Tools incorrectly handled certain requests. An attacker inside the guest could possibly use this issue to gain root privileges inside the virtual machine.
first Aug 24, 2022 -
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Aug 15, 2022